If you have malicious code running in ring 0, you're already so boned, you really need to dust off and nuke it from orbit.